Hacked Off

Security awareness training is a common requirement in most businesses, but oftentimes it can be difficult to effectively teach employees how to recognise and respond to security risks.

In this episode, we speak with Javvad Malik – Security Awareness Advocate at KnowBe4, co-founder of Security B-Sides London and cybersecurity blogger – about the variety of risks out there, the challenges of security awareness training, and how best to promote it.

00:28 What is a Security Awareness Advocate?

02:45 Challenges

11:14 Messaging

16:20 Importance of Security Champions

19:25 Minimising risk

21:45 Lesser-known types of phishing attacks

29:20 Promotion

38:10 The fear of embarrassment

40:40 Bias and the role of marketing

Listening time: 46 minutes

Host: Holly Grace Williams, MD at Secarma

Guests: Javvad Malik, Security Awareness Advocate at KnowBe4

KnowBe4: www.knowbe4.com

Connect with Javvad: www.linkedin.com/in/javvad/

Javvad on Twitter: www.twitter.com/J4vv4d

Resources:

Daniel Kahneman’s Ted Talk: https://www.ted.com/talks/daniel_kahneman_the_riddle_of_experience_vs_memory

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

Studies in recent years have revealed how little diversity there is within the cybersecurity industry, with women making up only 8% of the cyber workforce in the UK.

In this episode, we speak with Dr Andrea Cullen and Lorna Armitage – co-founders of cyber training organisation CAPSLOCK – about the difficulties of getting into cyber, the need for accessibility and inclusivity in the industry, and recruitment advice for organisations and those wanting to get hired.

02:52 Obstacles for those wanting to enter the industry

09:33 Cyber skills

14:05 Building confidence

16:35 Breaking into cyber

21:32 Imposter syndrome and conquering fears

31:14 Finding yourself and your strengths

36:14 The importance of finding a good fit

39:21 Advice for those wanting to get into the industry and recruiters

Listening time: 44 minutes

Host: Holly Grace Williams, MD at Secarma

Guests: Dr Andrea Cullen and Lorna Armitage, co-founders of CAPSLOCK

CAPSLOCK: https://www.capslock.ac

Connect with Andrea: https://www.linkedin.com/in/dr-andrea-c-57a29522/

Connect with Lorna: https://www.linkedin.com/in/lorna-armitage/

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

Over the past year and a half, the event industry have had to adapt like never before, and this led to many events going online via webinars, digital roundtables, and large-scale virtual conferences.

In this episode, we interviewed Natasha Taylor - Senior Conference Producer at DTX - about what makes a successful cybersecurity event, networking from home, and what the future of tech conferences could look like.

0.40 Preparation is everything

4:36 What makes a good panel or presentation?

8:50 It's good to disagree

14:55 Overcoming obstacles

17:20 Technical difficulties

22:30 Why you should give public speaking a go

26:00 Finding a balance

34:20 The future of networking

Listening time: 45 minutes

Host: Holly Grace Williams, MD at Secarma

Guest: Natasha Taylor, Senior Conference Producer at DTX Europe & DTX Manchester

DTX Europe: www.dt-x.io/europe/en/page/dtx-europe

DTX 360: www.dtx360.io/live/en/page/home

Connect with Natasha: www.linkedin.com/in/natasha-taylor-6969a0a9

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

This week, Holly is joined by Clean.io's Kathleen Booth to talk about how the very methods that marketing teams use to bring in customers may also attract the unwanted attention of cyber-criminals. Whether it's third party plug-ins, digital ads, or even a stray tweet - hackers can corrupt your marketing department's efforts and attack your organisation.

Thankfully, there are ways to balance robust business security without cutting your marketing team off at the knees. Listen to this week's interview for discussion around innovative yet secure marketing strategies, the importance of cybersecurity awareness training, and why marketers and security staff should be best friends.

0.20 About Clean.io

2:47 3rd party code: what are the risks?

13:00 Broaden your security awareness training

21:00 Marketing + Security

29:10 The attack surface

31:55 Good cyber hygiene

32:55 The keys to the kingdom

35:55 How it feels to be hacked

Listening time: 42 minutes

Host: Holly Grace Williams, MD at Secarma

Guest: Kathleen Booth, VP Marketing at Clean.io

Find out more here: www.clean.io

Kathleen's podcast: https://inboundsuccesspodcast.com

Connect with Kathleen: www.linkedin.com/in/kathleenslatterybooth

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

This week, Holly speaks with Patricia Keating, founder of Tech Manchester - a start-up hub designed to upskill Manchester-based entrepreneurs, nurture their ideas, and connect them with investors. They discuss cybersecurity for start-ups, the tech business landscape in Manchester, and how virtual conferencing allows you to be in two places at once.

1:20 Working with start-ups

3:55 Is London the only tech hub?

5:30 Common misconceptions

7:55 Mentoring tech business founders

12:00 What does "failing" mean?

16:00 Work-life balance

22:35 Crisis spawns innovation

30:05 Working from home means working anywhere

34:00 Sharing the journey

Listening time: 36 minutes

Host: Holly Grace Williams, MD at Secarma

Guest: Patricia Keating, Founder of Tech Manchester

Find out more here: www.techmanchester.co.uk

Patricia's podcast: www.podcasts.apple.com/gb/podcast/fastforward/id1438089653

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

This week, Holly delves deeper into the topic of security higher education and training with Dr Dan Prince - Senior Lecturer in Security and Protection Science at Lancaster University's School of Computing and Communications.

Together, they discuss the challenges that the mentors of today have when teaching the security experts of tomorrow, how to prepare students for threats that may not exist, and how thinking differently may be the key to keeping one step ahead of threat actors.

1:00 Preparing the next generation

4:30 Creating the framework for a Masters in security

9:55 Where is the line?

17:15 Know your enemy

20:40 Working with the NCSC

29:30 Bridging the disconnect

34:00 Taking notes from R2-D2

36:00 How does Lancaster University engage with companies?

Listening time: 43 minutes

Host: Holly Grace Williams, MD at Secarma

Guest: Dr Dan Prince, Senior Lecturer at Lancaster University

Contact Dan here: www.linkedin.com/in/drdanielprince

You can find more info about Lancaster University's security research centre here: www.lancaster.ac.uk/scc

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

Recently, the University of Salford announced their partnership with Tanium, to help the education institution improve their security against an increase of attacks. Universities have been high up on the target list for threat actors over the course of the pandemic, and these nefarious parties aren't slowing down anytime soon.

In this episode, Holly interviews Mark Wantling - the University of Salford's CISO, as well as Chris Vaughan of Tanium to understand more about their partnership and trade tips on protecting the education sector from cyber-attacks.

1:00 Security challenges in higher education

3:40 Joiners, movers, and leavers

8:30 Are the basics really all that basic?

13:10 How Covid-19 has pushed digital transformation

15:00 Visibility is key

22:00 Your whole security team vs a single pentester

33:00 Are universities sitting ducks for cybercriminals?

37:45 Should you pay the ransom?

40:00 Stop calling it a ransomware attack

45:50 Are you setting the bar high enough?

57:30 Timing is everything

59:00 Closing remarks

Listening time: 60 minutes

Host: Holly Grace Williams, MD at Secarma

Guests: Mark Wantling, CISO at the University of Salford

Chris Vaughan, Technical Account Manager at Tanium

More info on Salford & Tanium's partnership: www.tanium.com/customers/university-of-salford

www.tanium.com/press-releases/tanium-helps-protect-the-university-of-salford-from-surge-of-cyberattacks

Contact Mark here: www.linkedin.com/in/mark-wantling-7b149690

More about the University of Salford: www.salford.ac.uk

Contact Chris and other Tanium reps here: www.tanium.com

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

NCSC approved security tips: www.ncsc.gov.uk/collection/10-steps

Although our specialty is penetration testing, there's a wide variety of interesting roles available within the security industry. In this episode, Holly sits down with Evan Jones of Complete Cyber, to explore the ins and outs of security architecture.

Over the course of the conversation, they discuss the skills necessary to become a security architect, the benefits of using a pen and paper to map out possible threats, and Evan also explains how solution architecture is a lot like a Rubik's cube... somehow.

0:35 Transferring your skills

3:30 What is a security architect?

15:00 What makes a good security architect?

17:00 Dear customers, help us help you

30:30 Threat modelling with a pen and paper

44:20 Very naughty people and adapting to your audience

46:00 The 6th face of the cube

Listening time: 50 minutes

Host: Holly Grace Williams, MD at Secarma

Guest: Evan Jones, Lead Security Architect at Complete Cyber

Find out more here: www.completecyber.co.uk

www.twitter.com/completecyber

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

In last week's episode we talked about how security professionals can leverage their skills to get into cyber, but how do you obtain those skills in the first place? Enter Jonathan Slater, co-founder of CapsLock and our guest for today.

In this episode, we discuss his journey from nuclear, to recruitment, to co-founding a disruptive education model that's designed to help everyone from bus drivers to web developers gain a qualification - and most importantly, employment - in cybersecurity.

We also take a deep dive into how candidates can make themselves more attractive to hiring managers, diversity in cyber, and the benefits of starting all over again.

3:15 Stepping down to step up

5:50 Roles to work towards

14:00 Group projects

20:00 Communication, communication, communication

22:30 Increasing your employability

26:15 Sidebar - what is DevSecOps?

31:40 Diversity in cyber

35:15 Reskilling recommendations

36:50 Different roles, sectors, and company sizes

41:30 Standing out from the crowd

Listening time: 50 minutes

Host: Holly Grace Williams, MD at Secarma

Guest: Jonathan Slater, Co-founder of CapsLock

Find out more here: www.capslock.ac

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

In this episode, Holly interviews Jay Jay Davey - SOC Analyst at CyberClan and founder of NoxCyber - a one stop page of career advice for aspiring cyber security professionals, with resources to help you get into the industry.

We spoke with him about the different routes into cyber, as well as what to do once you're in. Listen to this episode for career advice, CV tips, and why explaining what networks are to your parents could lead you being a CEO's shoulder to cry on one day.

1:05 About NoxCyber

2:40 Getting into cybersecurity

7:15 Getting hired

13:05 The different roles in cyber

22:30 Are mentors vital?

26:35 Public speaking

37:00 Develop your writing skills and promote yourself

40:10 The importance of emotional intelligence in cyber

Listening time: 43 minutes

Host: Holly Grace Williams, MD at Secarma

Guest: Jay Jay Davey, founder of NoxCyber

Find Jay Jay here:

www.noxcyber.co.uk

www.linkedin.com/in/noxcyber

Our website: www.secarma.com

Tweet us: www.twitter.com/Secarma

Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455